@remnic/core 9.3.715 → 9.3.717

package/dist/{chunk-BNOAB5HH.js → chunk-YAINYEM3.js}

@@ -32,18 +32,8 @@ import {
   runMemoryGovernance
 } from "./chunk-XZTUMWKQ.js";
 import {
-  clusterByKey,
-  combineNamespaces,
-  defaultGitInvoker,
-  expandScopeProfileReadNamespaces,
-  lcmSessionKeyForNamespace,
-  projectTagProjectId,
-  resolveCodingNamespaceOverlay,
-  resolveGitContext,
-  resolveScopePlan,
-  resolveScopeProfilePlan,
-  sanitizeFragment
-} from "./chunk-SHRRWOVY.js";
+  clusterByKey
+} from "./chunk-2KF4HDG2.js";
 import {
   getTrustZoneStoreStatus,
   isTrustZoneName,
@@ -59,6 +49,19 @@ import {
 import {
   estimateRecallTokens
 } from "./chunk-AJOIM6UR.js";
+import {
+  combineNamespaces,
+  defaultGitInvoker,
+  expandScopeProfileReadNamespaces,
+  lcmSessionKeyForNamespace,
+  projectTagProjectId,
+  resolveCodingNamespaceOverlay,
+  resolveGitContext,
+  resolveScopePlan,
+  resolveScopeProfilePlan,
+  resolveWritableNamespaceValue,
+  sanitizeFragment
+} from "./chunk-J6BH2OBA.js";
 import {
   namespaceCollectionName
 } from "./chunk-CTOQEZSN.js";
@@ -4412,13 +4415,19 @@ var EngramAccessService = class {
     if (trusted) return trusted;
     return resolvePrincipal(sessionKey, this.orchestrator.config);
   }
-  resolveWritableNamespace(namespace, sessionKey, authenticatedPrincipal) {
-    const resolved = this.resolveNamespace(namespace);
-    const principal = this.resolveRequestPrincipal(sessionKey, authenticatedPrincipal);
-    if (!canWriteNamespace(principal, resolved, this.orchestrator.config)) {
-      throw new EngramAccessInputError(`namespace is not writable: ${resolved}`);
+  writableNamespaceFor(namespace, sessionKey, authenticatedPrincipal) {
+    const result = resolveWritableNamespaceValue(
+      namespace,
+      sessionKey,
+      authenticatedPrincipal,
+      this.orchestrator.config
+    );
+    if (!result.ok) {
+      throw new EngramAccessInputError(
+        result.reason === "unsupported" ? `unsupported namespace: ${result.namespace}` : `namespace is not writable: ${result.namespace}`
+      );
     }
-    return resolved;
+    return result.namespace;
   }
   /**
    * Resolve a coding context from `cwd`/`projectTag` WITHOUT persisting it to
@@ -4486,7 +4495,7 @@ var EngramAccessService = class {
   async resolveCodingScopedWriteNamespace(request) {
     const hasExplicitNamespace = typeof request.namespace === "string" && request.namespace.trim().length > 0;
     if (hasExplicitNamespace) {
-      return this.resolveWritableNamespace(
+      return this.writableNamespaceFor(
         request.namespace,
         request.sessionKey,
         request.authenticatedPrincipal
@@ -4504,7 +4513,7 @@ var EngramAccessService = class {
       return profilePlan.writeNamespace;
     }
     if (!overlay) {
-      return this.resolveWritableNamespace(
+      return this.writableNamespaceFor(
         void 0,
         request.sessionKey,
         request.authenticatedPrincipal
@@ -4582,7 +4591,7 @@ var EngramAccessService = class {
     );
     const hasExplicitNamespace = typeof request.namespace === "string" && request.namespace.trim().length > 0;
     if (hasExplicitNamespace) {
-      const writeNamespace2 = this.resolveWritableNamespace(
+      const writeNamespace2 = this.writableNamespaceFor(
         request.namespace,
         request.sessionKey,
         request.authenticatedPrincipal
@@ -4676,7 +4685,7 @@ var EngramAccessService = class {
       };
     }
     if (!codingOverlayApplied) {
-      const writeNamespace2 = this.resolveWritableNamespace(
+      const writeNamespace2 = this.writableNamespaceFor(
         void 0,
         request.sessionKey,
         request.authenticatedPrincipal
@@ -6687,14 +6696,14 @@ var EngramAccessService = class {
     if (this._correctionService) return this._correctionService;
     const service = createCorrectionService({
       orchestrator: this.orchestrator,
-      resolveAuthorizedNamespace: async (req) => this.resolveWritableNamespace(req.namespace, req.sessionKey, req.principal),
+      resolveAuthorizedNamespace: async (req) => this.writableNamespaceFor(req.namespace, req.sessionKey, req.principal),
       resolveReadableNamespaces: (req) => {
         const principal = this.resolveRequestPrincipal(req.sessionKey, req.principal);
         return recallNamespacesForPrincipal(principal, this.orchestrator.config);
       },
       canWriteNamespace: (req) => {
         try {
-          this.resolveWritableNamespace(req.namespace, req.sessionKey, req.principal);
+          this.writableNamespaceFor(req.namespace, req.sessionKey, req.principal);
           return Promise.resolve(true);
         } catch {
           return Promise.resolve(false);
@@ -7016,7 +7025,7 @@ var EngramAccessService = class {
     if (deepSleep.enabled === false && deepSleep.enabledExplicitlySet === true) {
       throw new Error("memory governance is disabled by dreams.phases.deepSleep.enabled=false");
     }
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       request.namespace,
       void 0,
       request.authenticatedPrincipal ?? principal
@@ -7054,7 +7063,7 @@ var EngramAccessService = class {
     };
   }
   async procedureMiningRun(request, principal) {
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       request.namespace,
       void 0,
       request.authenticatedPrincipal ?? principal
@@ -7073,7 +7082,7 @@ var EngramAccessService = class {
     };
   }
   async liveConnectorsRun(request = {}, principal) {
-    this.resolveWritableNamespace(
+    this.writableNamespaceFor(
       void 0,
       void 0,
       request.authenticatedPrincipal ?? principal
@@ -7103,7 +7112,7 @@ var EngramAccessService = class {
    * other maintenance MCP tools.
    */
   async patternReinforcementRun(request = {}, principal) {
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       request.namespace,
       void 0,
       request.authenticatedPrincipal ?? principal
@@ -7337,7 +7346,7 @@ var EngramAccessService = class {
     if (!isTrustZoneName(request.targetZone)) {
       throw new EngramAccessInputError(`unsupported trust-zone target: ${String(request.targetZone)}`);
     }
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       request.namespace,
       void 0,
       request.authenticatedPrincipal
@@ -7368,7 +7377,7 @@ var EngramAccessService = class {
     };
   }
   async trustZoneDemoSeed(request) {
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       request.namespace,
       void 0,
       request.authenticatedPrincipal
@@ -7401,7 +7410,7 @@ var EngramAccessService = class {
     if (reasonCode.length === 0) {
       throw new EngramAccessInputError("reasonCode is required");
     }
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       request.namespace,
       void 0,
       request.authenticatedPrincipal
@@ -8148,7 +8157,7 @@ var EngramAccessService = class {
     }
     const symptom = request.symptom?.trim();
     if (!symptom) throw new EngramAccessInputError("symptom is required");
-    const resolvedNs = this.resolveWritableNamespace(request.namespace, void 0, request.principal);
+    const resolvedNs = this.writableNamespaceFor(request.namespace, void 0, request.principal);
     const storage = await this.orchestrator.getStorage(resolvedNs);
     const created = await storage.appendContinuityIncident({
       symptom,
@@ -8170,7 +8179,7 @@ var EngramAccessService = class {
     if (!fixApplied) throw new EngramAccessInputError("fixApplied is required");
     const verificationResult = request.verificationResult?.trim();
     if (!verificationResult) throw new EngramAccessInputError("verificationResult is required");
-    const resolvedNs = this.resolveWritableNamespace(request.namespace, void 0, request.principal);
+    const resolvedNs = this.writableNamespaceFor(request.namespace, void 0, request.principal);
     const storage = await this.orchestrator.getStorage(resolvedNs);
     const closed = await storage.closeContinuityIncident(id, {
       fixApplied,
@@ -8195,7 +8204,7 @@ var EngramAccessService = class {
     if (!this.orchestrator.config.identityContinuityEnabled) {
       return { enabled: false, reason: "Identity continuity is disabled." };
     }
-    const resolvedNs = this.resolveWritableNamespace(request.namespace, void 0, request.principal);
+    const resolvedNs = this.writableNamespaceFor(request.namespace, void 0, request.principal);
     const storage = await this.orchestrator.getStorage(resolvedNs);
     const loop = await storage.upsertIdentityImprovementLoop({
       id: request.id?.trim() || "",
@@ -8214,7 +8223,7 @@ var EngramAccessService = class {
     }
     const id = request.id?.trim();
     if (!id) throw new EngramAccessInputError("id is required");
-    const resolvedNs = this.resolveWritableNamespace(request.namespace, void 0, request.principal);
+    const resolvedNs = this.writableNamespaceFor(request.namespace, void 0, request.principal);
     const storage = await this.orchestrator.getStorage(resolvedNs);
     const reviewed = await storage.reviewIdentityImprovementLoop(id, {
       status: request.status,
@@ -8254,7 +8263,7 @@ var EngramAccessService = class {
     };
     const hasUpdate = Object.values(updates).some((v) => typeof v === "string" && v.length > 0);
     if (!hasUpdate) throw new EngramAccessInputError("At least one section field is required.");
-    const resolvedNs = this.resolveWritableNamespace(request.namespace, void 0, request.principal);
+    const resolvedNs = this.writableNamespaceFor(request.namespace, void 0, request.principal);
     const storage = await this.orchestrator.getStorage(resolvedNs);
     const existing = await storage.readIdentityAnchor();
     const merged = this.mergeIdentityAnchorSections(existing, updates);
@@ -8757,7 +8766,7 @@ ${next}`);
         "memoryId must not contain path separators"
       );
     }
-    const resolvedNs = this.resolveWritableNamespace(
+    const resolvedNs = this.writableNamespaceFor(
       request.namespace,
       request.sessionKey,
       request.principal
@@ -8770,7 +8779,7 @@ ${next}`);
     });
   }
   async memoryPromote(request) {
-    const resolvedNs = this.resolveWritableNamespace(request.namespace, request.sessionKey, request.principal);
+    const resolvedNs = this.writableNamespaceFor(request.namespace, request.sessionKey, request.principal);
     const storage = await this.orchestrator.getStorage(resolvedNs);
     await storage.updateMemoryFrontmatter(request.memoryId, {
       lifecycleState: "active",
@@ -8804,7 +8813,7 @@ ${next}`);
         `memory_action_apply: outcome must be "applied", "skipped", or "failed"; got ${JSON.stringify(outcome)}`
       );
     }
-    const resolvedNs = this.resolveWritableNamespace(
+    const resolvedNs = this.writableNamespaceFor(
       request.namespace,
       request.sessionKey,
       request.principal
@@ -8839,7 +8848,7 @@ ${next}`);
     return { recorded, event: preview };
   }
   async contextCheckpoint(request) {
-    const resolvedNs = this.resolveWritableNamespace(request.namespace, request.sessionKey, request.principal);
+    const resolvedNs = this.writableNamespaceFor(request.namespace, request.sessionKey, request.principal);
     const storage = await this.orchestrator.getStorage(resolvedNs);
     const storageDir = storage.dir;
     const { writeFile: writeFile4, mkdir: mkdir5 } = await import("fs/promises");
@@ -8881,7 +8890,7 @@ ${next}`);
    */
   async recordCitationUsage(request) {
     if (request.entries.length === 0) return { submitted: 0, matched: 0 };
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       request.namespace,
       request.sessionId,
       request.authenticatedPrincipal
@@ -9108,7 +9117,7 @@ ${next}`);
         "authentication required: namespaces are enabled and no principal was supplied"
       );
     }
-    const resolved = this.resolveWritableNamespace(namespace, void 0, principal);
+    const resolved = this.writableNamespaceFor(namespace, void 0, principal);
     const storage = await this.orchestrator.getStorage(resolved);
     return { namespace: resolved, storage };
   }
@@ -9151,7 +9160,7 @@ ${next}`);
    */
   async capsuleImport(opts) {
     const { namespace, principal, root: explicitRoot, memoryDir: explicitMemoryDir, ...importOptions } = opts;
-    const resolvedNamespace = this.resolveWritableNamespace(namespace, void 0, principal);
+    const resolvedNamespace = this.writableNamespaceFor(namespace, void 0, principal);
     const storage = await this.orchestrator.getStorage(resolvedNamespace);
     const root = explicitRoot ?? storage.dir;
     const memoryDir = explicitMemoryDir ?? this.orchestrator.config.memoryDir;
@@ -9211,7 +9220,7 @@ ${next}`);
    */
   async capsuleExport(opts) {
     const { namespace, principal, root: explicitRoot, memoryDir: explicitMemoryDir, ...exportOptions } = opts;
-    const resolvedNamespace = this.resolveWritableNamespace(namespace, void 0, principal);
+    const resolvedNamespace = this.writableNamespaceFor(namespace, void 0, principal);
     const storage = await this.orchestrator.getStorage(resolvedNamespace);
     const root = explicitRoot ?? storage.dir;
     const memoryDir = explicitMemoryDir ?? this.orchestrator.config.memoryDir;
@@ -9394,7 +9403,7 @@ ${next}`);
     }
   }
   async offlineSyncApplyFileContent(options) {
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       options.namespace,
       void 0,
       options.principal
@@ -9431,7 +9440,7 @@ ${next}`);
     }
   }
   async offlineSyncApply(options) {
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       options.namespace,
       void 0,
       options.principal
@@ -9497,7 +9506,7 @@ ${next}`);
       );
     }
     const dryRun = options.dryRun === true;
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       options.namespace,
       void 0,
       options.authenticatedPrincipal
@@ -9751,4 +9760,4 @@ export {
   shapeMemorySummary,
   EngramAccessService
 };
-//# sourceMappingURL=chunk-BNOAB5HH.js.map
+//# sourceMappingURL=chunk-YAINYEM3.js.map